Rogue Commit Injected Destructive Prompt into Amazon Q VS Code Extension v1.84.0

·2 views

A malicious commit pushed on July 13, 2025 by a GitHub account called lkmanka58 inserted a prompt into Amazon Q Developer for VS Code, and the code shipped in version 1.84.0 released July 17. The payload instructed the AI agent to wipe local home directories and delete AWS resources, and it ran only in production builds. AWS attributed the breach to an overly scoped GitHub token in the extension's CodeBuild configuration, tracked as CVE-2025-8217. The attacker claimed to have gained access through a pull request and said they aimed to expose weaknesses in Amazon's AI security, though that claim remains unverified. Version 1.85.0, released July 19, removed the malicious downloader, and AWS issued its bulletin after the story was reported by 404 Media.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why .NET chat loops lose OpenAI encrypted reasoning between turns

A reasoning model can appear to forget the first turn of a conversation, and the cause is often in the application's own chat loop rather than the prompt or model. When stateless requests ask for encrypted reasoning, the response includes an encrypted reasoning item that the service does not store, so it must be sent back on the next turn. In Microsoft.Extensions.AI, this data sits in TextReasoningContent parts, which are separate from the plain text the response exposes. Developers who save only the response text in their history discard this encrypted reasoning, so the follow-up request carries no prior reasoning items. The author demonstrates the problem with an offline .NET sample and tests, and recommends appending the entire response to the history instead.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Crafting and Parsing L2-L7 Packets with Scapy: A Hands-On Lab

The author walks through a networking lab aimed at debugging layer 2, 3, 4, and 7 behavior using Scapy. At layer 2, an ARP request sent to a broadcast address is shown, and a layer 3 test illustrates how a target ignores a broadcast-addressed packet while tcpdump captures traffic. For layers 4 through 7, the author builds a packet with Ether, IP, TCP, and Raw layers, carrying an SSH banner payload to port 22. The packet is verified on a VyOS system using tcpdump, which captured it even though no TCP handshake was performed. The author concludes that Scapy provides full control over payload content within the TCP/IP envelope.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Five Unhappy-Path Tests to Write Before Trusting a .NET 10 Multi-Agent Workflow

A developer building a support-ticket triage workflow on Microsoft Agent Framework for .NET 10 argues that demos only show the happy path, while real failures include malformed model output, unapproved promises and provider outages. They built the workflow with a classifier agent, two specialist agents and plain C# steps, and wrote 58 tests that run without an API key or network access. The core technique is a deterministic fake chat client that can be told to produce specific failures, such as cut-off JSON or an HTTP exception, via trigger strings. The author also describes a reply-guard step that checks specialist drafts for oversized refunds, guarantee language and sensitive data, routing risky replies to human review. The post presents five such tests as a starting point for any agent workflow, along with the bug each one catches.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Kraken CSV Format Change Exposes Risks in Crypto Tax Importers

A CoinTaxman bug report from July 2026 flagged that a newer Kraken Ledgers export adds subclass and wallet columns, which older parsers cannot handle. The same report noted unhandled ledger types such as earn and hybridearnwithdrawal, along with asset naming mismatches like BTC/XBT and DOGE/XDG. The author argues that importers should reject unrecognized layouts and unclassified events rather than guess their tax treatment. The proposed fix recognizes the new twelve-column header as a distinct format and flags unsupported wallet types for manual review. The author stresses that the patch is not a full tax determination or complete Kraken importer.

0 comments Read more at DEV Community